Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/ec1fdd-1080-4167-955b-205ffaf84c02/1/yLoeGBKG7Nz3TclLwz8ZlJcTs5E.mft
File: yLoeGBKG7Nz3TclLwz8ZlJcTs5E.mft (raw, json)
Hash identifier: BzeAsizTBx4h1hvbTAMxMXaeatgcJ0KTwZdERlm7Kcc=
Subject key identifier: FD:65:38:B5:DE:F9:61:91:D4:CD:A2:7F:64:70:B3:A0:6B:B7:6D:EE
Authority key identifier: C8:BA:1E:18:12:86:EC:DC:F7:4D:C9:4B:C3:3F:19:94:97:13:B3:91
Certificate issuer: /CN=c8ba1e181286ecdcf74dc94bc33f19949713b391
Certificate serial: 01A06D5D85A2A9055F4703F915BB4AD39E2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yLoeGBKG7Nz3TclLwz8ZlJcTs5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/ec1fdd-1080-4167-955b-205ffaf84c02/1/yLoeGBKG7Nz3TclLwz8ZlJcTs5E.mft
Manifest number: 0170
Signing time: Fri 04 Sep 2026 17:00:40 +0000
Manifest this update: Fri 04 Sep 2026 17:00:40 +0000
Manifest next update: Sat 05 Sep 2026 17:00:40 +0000
Files and hashes: 1: JLl9ieAggP9WR-N8wVWrBA7z2QU.roa (hash: /5ecZkNFv83mEzuS65WLl+FgZAKLhz3j2fY0mS2pA+k=)
2: Z33J-rBD7SOTEmIb_eXTJ1-LaRY.roa (hash: klxLaLJRe/p4fV22qW+zJTTxCBMy1xczkItxrxoNHkw=)
3: yLoeGBKG7Nz3TclLwz8ZlJcTs5E.crl (hash: zucWsRrSgfgXdKYjwi8LYKZrSiRnIL6WIzbDB4+wEI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/ec1fdd-1080-4167-955b-205ffaf84c02/1/yLoeGBKG7Nz3TclLwz8ZlJcTs5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/ec1fdd-1080-4167-955b-205ffaf84c02/1/yLoeGBKG7Nz3TclLwz8ZlJcTs5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/yLoeGBKG7Nz3TclLwz8ZlJcTs5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 17:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:5d:85:a2:a9:05:5f:47:03:f9:15:bb:4a:d3:9e:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8ba1e181286ecdcf74dc94bc33f19949713b391
Validity
Not Before: Sep 4 17:00:40 2026 GMT
Not After : Sep 5 17:00:40 2026 GMT
Subject: CN=fd6538b5def96191d4cda27f6470b3a06bb76dee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5a:77:74:df:f1:e6:c0:c7:3b:d7:49:68:96:
f8:7a:e3:ed:ff:18:f7:47:cf:8a:8e:22:71:3d:0b:
29:e0:31:d6:3b:1e:4e:e6:ff:c2:7c:70:57:48:40:
e3:85:a1:60:39:57:48:3f:f3:db:26:f1:61:75:72:
62:6b:6f:f9:49:5b:e7:93:6a:b5:f5:b0:97:f9:61:
70:cf:e9:d1:99:67:49:57:02:16:9b:80:19:89:db:
fe:ee:51:4e:9e:71:79:1e:48:00:f2:4d:f0:a8:6d:
46:99:ab:87:9a:3e:47:88:06:89:60:39:8b:72:42:
6d:93:8c:5d:fc:b5:31:af:4b:67:5d:7d:80:9b:f4:
c9:13:84:7f:b8:78:d8:79:3d:7a:28:92:2a:73:8e:
51:8e:d2:b3:19:65:19:c2:e3:bb:d1:c1:20:7a:75:
95:66:46:df:3d:66:4c:4f:6f:3f:5f:54:42:ff:8c:
fc:7e:72:cd:02:c1:32:ee:6d:06:d3:0e:6a:05:52:
4f:8b:99:79:b0:bf:b3:c1:4a:f7:69:ba:2f:2b:d3:
61:d0:b0:1f:69:44:ae:59:28:be:b9:c9:4a:04:1b:
b7:6b:c1:ef:a0:67:3c:9d:6a:17:a9:68:e8:8d:d5:
69:0d:da:82:cb:10:3c:d5:6e:05:19:8d:af:30:23:
de:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:65:38:B5:DE:F9:61:91:D4:CD:A2:7F:64:70:B3:A0:6B:B7:6D:EE
X509v3 Authority Key Identifier:
keyid:C8:BA:1E:18:12:86:EC:DC:F7:4D:C9:4B:C3:3F:19:94:97:13:B3:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yLoeGBKG7Nz3TclLwz8ZlJcTs5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ec1fdd-1080-4167-955b-205ffaf84c02/1/yLoeGBKG7Nz3TclLwz8ZlJcTs5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ec1fdd-1080-4167-955b-205ffaf84c02/1/yLoeGBKG7Nz3TclLwz8ZlJcTs5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:12:1d:5f:41:6f:78:1f:91:c1:75:0c:47:7b:78:e9:ac:ab:
8a:f2:3b:0a:7f:15:d7:38:e4:63:e6:be:ca:dc:c8:76:5a:18:
6d:61:88:c0:df:33:b6:4c:6c:ce:a4:07:f4:b1:3a:43:dd:be:
7b:c8:9a:5b:1e:46:db:be:8e:9a:24:28:0c:31:5a:0c:86:ab:
77:29:5e:0f:04:c8:e5:07:4f:70:ae:02:4f:50:55:fe:8a:80:
7d:af:f7:ac:b2:cd:1d:5c:6d:15:b1:45:68:09:d6:c8:76:cc:
cc:7d:23:2f:16:7f:30:a3:26:72:80:18:71:02:07:1f:e8:59:
b0:f6:d5:9f:07:05:a6:1c:47:0d:97:b5:e6:7a:8a:8f:58:3b:
1a:48:33:83:7a:ef:ed:90:f7:8f:88:05:85:be:40:f8:55:5d:
8b:23:be:6c:7a:e3:c2:02:17:26:be:5b:d9:a7:ac:73:25:13:
f7:19:8a:4b:cf:47:dd:40:b5:96:6a:81:f8:07:2f:c2:54:52:
61:2a:b5:70:dc:c8:b7:34:2f:e3:9d:39:e3:84:23:cc:e7:c2:
42:95:cf:55:49:8a:d8:dc:28:6f:08:68:6f:8c:f8:41:37:20:
b9:e2:27:96:99:0f:14:1e:09:89:85:86:fe:f2:0e:de:43:39:
23:d8:f0:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:02:41 2026 by rpki-client